Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Jan 11, 2011 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.5.5Upgrade to Oracle MySQL version 5.1.49 | Aug 29, 2012 | Jan 11, 2011 |
| Oracle_linux | — | Upgrade mysql-serverUpgrade mysql-testUpgrade mysql-embeddedUpgrade mysql-libsUpgrade mysql-embedded-develUpgrade mysql-benchUpgrade mysqlUpgrade mysql-devel | Oct 16, 2024 | Jan 11, 2011 |
| Suse | — | Upgrade libmysqlclient_r15Upgrade libmysqlclient15Upgrade mysql-MaxUpgrade mysqlUpgrade libmysqlclient15-x86Upgrade libmysqlclient15-32bitUpgrade mysql-client | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0Upgrade mysql-server-5.1 | Nov 8, 2024 | Jan 11, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub